Android Enterprise permissions

August 21, 2018

| Contributed by:

You can configure how requests to Android Enterprise (Android enterprise) apps, that are within work profiles, handle what Google calls “dangerous” permissions. You control whether the user is prompted to grant or deny the permission request from the app. This feature applies to devices running Android 7.0 and later.

Google defines dangerous permissions as permissions that give the app access to data or resources that involve the user’s private information or could potentially affect the user’s stored data or the operation of other apps. For example, the ability to read the user’s contacts is a dangerous permission.

You can configure a global state that controls the behavior of all dangerous permission requests to Android Enterprise apps within work profiles. You can also control the behavior of dangerous permission request for individual permission groups, as defined by Google, for each app. These individual settings override the global state.

Android Enterprise settings

Grant: All dangerous permission requests are granted. The user is not prompted.

Deny: All dangerous permission requests are denied. The user is not prompted.

Default is Prompt.

Set an individual behavior for each permission group, for each app. To configure the behavior for a permission group: Click Add and then under App, choose an app from the list. Under Grant State, choose Prompt, Grant,, or Deny. This grant state overrides the global state.

Prompt: Users are prompted to grant or deny dangerous permission requests from this permission group for this app.

Grant: Dangerous permission requests from this permission group for this app are granted. The user is not prompted.

Deny: Dangerous permission requests from this permission group for this app are denied. The user is not prompted.

Default is Prompt.

Click Save next to the app and grant state.

To add more apps for the permission group, click Add again and repeat these steps.

When you have finished setting grant states for all permission groups you want to, click Next.

The official version of this content is in English. Some of the Citrix documentation content is machine translated for your convenience only. Citrix has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Citrix product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Citrix, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Citrix will not be held responsible for any damage or issues that may arise from using machine-translated content.